Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 4f3d47ae5d9e6544…

MALICIOUS

Office (OLE)

517.0 KB Created: 1998-09-17 03:03:00 Authoring application: Microsoft Word for Windows 95
MD5: 10e81c3b2e45dddc9b41a94157a126c0 SHA-1: df701245336c02723b463fb509624895c68a7228 SHA-256: 4f3d47ae5d9e65447058bb6cb13803d8cd31948fd966ff6f717e3af0515cebd7
60 Risk Score

Malware Insights

MITRE ATT&CK
T1204.002 Malicious File

The file is identified as malicious by ClamAV with the signature Win.Trojan.Tm-1. The file's metadata indicates it is a Microsoft Word 95 document, a version known to be vulnerable to various exploits. The heuristic firing suggests an attempt to exploit this vulnerability, likely leading to arbitrary code execution.

Heuristics 1

  • ClamAV: Win.Trojan.Tm-1 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Tm-1